Personal cloud encrypted at rest with S3 backed storage reddit / selfhosted ---------------------------------------------------------------------- danielnieto89 · 2023-11-05 06:12 Looking for a solution to store my files, I’d like to have a web interface to upload my files and then they would get uploaded to s3 or b2 so I can have “unlimited” quota (obviously paying for the space) and also I’m very paranoid I’d like the files to be encrypted before reaching s3, ideally you would be able to browse and view the files via the web interface so it must have on-the-fly decryption, does anything like this exist? Or am I delusional? ---------------------------------------------------------------------- 7ionwor · 2023-11-05 08:39 Rclone ---------------------------------------------------------------------- WiseCookie69 · 2023-11-05 10:15 Nextcloud kann use S3, even as it's primary storage backend. ---------------------------------------------------------------------- lazyzyf · 2023-11-05 15:12 kopia ---------------------------------------------------------------------- Defiant-Ad-5513 · 2023-11-05 17:54 You can use SFTPGo it is mainly for SFTP but also has a web interface for admin/files and supports WEBDav so it is also Windows compatible out of the box and supports S3, local, SFTP backends ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-06 09:09 rClone with [S3 endpoint](https://rclone.org/s3/) and [crypt overlay](https://rclone.org/crypt/). See also r/rclone ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-06 09:10 Spotted the German. But seriously, did you use Nextcloud with encryption at rest? ---------------------------------------------------------------------- WiseCookie69 · 2023-11-06 12:32 Yes, many many years ago. Wasn't the greatest experience. Ended up having to write my own tool, to regain access to my data, as NC was unable to. But Nextcloud's S3 backend also supports SSE-C, which I'd trust more at this point - especially if you host the S3 endpoint yourself. ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-06 15:35 That's what I thought. Nextcloud is nice and easy but encryption is not one of its strong points. I like Nextcloud for having a single application that provides nice functionality. But if I want something secure and encrypted I'd rather suggest other services. Like [Stingle for photos](https://stingle.org/) ([compose file](https://github.com/stingle/stingle-api-docker#stingle-api- server)) or [Joplin](https://github.com/laurent22/joplin/), [Notesnook](https://github.com/streetwriters/notesnook/#notesnook) or [SimpleNote](https://simplenote.com/) for notes, or for storage rclone with the encrypt module etc. All of these support encryption but they are just separate services who aren't working together. [EteSync](https://etesync.com/) is probably an exception, since it also has support for contacts, calendars, tasks and notes. But it it doesn't have support for binary data. Nextcloud is simply not made to have proper encryption on different levels and if I understand this correctly, you could only have [_some_ file encryption](https://github.com/nextcloud/end_to_end_encryption/#end- to-end-encryption-app) [with various issues](https://github.com/nextcloud/end_to_end_encryption/issues) like [having some files unencrypted](https://github.com/nextcloud/end_ to_end_encryption/issues/386) and producing sync issues. Thus it's rather meant for [marketing purposes](https://nextcloud.com/encryption/) than for security. I also chatted once with [Jos Poortvliet, who is the Marketing Director of Ne xtcloud](https://www.reddit.com/r/selfhosted/comments/10x2f9d/comment/ j83os3e/) and it doesn't sound like Nextcloud will have encrypted options any time soon. ---------------------------------------------------------------------- Aheadcover · 2023-11-25 08:12 check sysax [sftp server](https://www.sysax.com/server/?rfrr=s4ctkq3v), it can be securely administered remotely using any web browser, using a HTTPS connection ensures that the communication is securely encrypted using SSL/TLS ---------------------------------------------------------------------- Hungry_Acanthaceae78 · 2023-12-24 06:46 check sysax [sftp server](https://www.sysax.com/server/?rfrr=s4ctkq3v), it can be securely administered remotely using any web browser, using a HTTPS connection ensures that the communication is securely encrypted using SSL/TLS